TokenPeek browser · never upload
Console

JWT · Base64 · Hash · UUID

Terminal-style toolkit for decoding tokens and transforming text locally. Signature is never cracked or forged.

session: idle · 0 uploads

# never leaves your machine

Signature is shown only — not verified. No secret cracking or forge on this site.

header

            

            

              
payload

              

            

            

              
signature (raw)

              

            

          

        


        
        

        
        

        
        
      

    


    

      How to verify no upload
      
    
        
  1. Open DevTools → Network.
    2. 
        
  2. Paste a token and run decode / hash.
    3. 
        
  3. Confirm no POST of your payload — only static assets load.
    4. 
      

      
Sample fills local text only. Nothing is sent to a decoder API.

    


    

      
How it works

      
TokenPeek is a CRT-style console: pick a tool in the sidebar, paste at the > prompt, and read luminous output panels.

      
Everything stays on your device. Free forever — no account, no Pro, no ads.

      

        
JWT decoder
Header + payload panels, signature raw

        
Base64 / Base64URL
Encode and decode in the browser

        
Hash generator
SHA-1 / 256 / 512 + MD5 locally

        
UUID generator
v4 UUIDs ready to copy

      

      
FAQ

      

        
Do my tokens leave my device?
No. Decode, encode, hash, and UUID generation run in your browser.

        
Does TokenPeek verify JWT signatures?
No. We decode and display parts only and clearly mark that the signature is unverified.

        
Is MD5 included?
Yes, via a small pure-JS implementation. Prefer SHA-256 for security-sensitive checks.